x-twitter-scraper
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md explicitly opens public X/Twitter pages (e.g., "agent-browser --cdp 9222 open https://x.com/home" and "open https://x.com/username") and runs JS eval to extract tweet text, so it ingests untrusted, user-generated social-media content that can influence the agent's actions.
Audit Metadata